SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target system.
References
Link | Resource |
---|---|
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2020-0021 | Vendor Advisory |
Configurations
Information
Published : 2020-10-28 04:15
Updated : 2020-10-30 13:50
NVD link : CVE-2020-5145
Mitre link : CVE-2020-5145
JSON object : View
CWE
CWE-427
Uncontrolled Search Path Element
Products Affected
sonicwall
- global_vpn_client